D-Link DIR-2150 GetFirmwareStatus Target Command Injection Remote Code Execution Vulnerability

CVE-2023-34281

Summary

A significant security vulnerability exists in the D-Link DIR-2150 router, allowing potential attackers in close network proximity to execute arbitrary code. This flaw arises due to insufficient validation of user-supplied input within the router's SOAP API, which is accessible over TCP port 80. While authentication is mandated for access, attackers can bypass this mechanism, leading to the exploitation of system calls. Consequently, this vulnerability has the potential to compromise the integrity and security of the affected routing devices.

References